Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/tygo1RL_pJihi8y-cyNcOBref8M.roa
File: tygo1RL_pJihi8y-cyNcOBref8M.roa (raw, json)
Hash identifier: LB6xUnRrIbSMOIQknmFtwSZ+AGUNLnNMY0YsF9ZJGfo=
Subject key identifier: B7:28:28:D5:12:FF:A4:98:A1:8B:CC:BE:73:23:5C:38:1A:DE:7F:C3
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 123DEB2B
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/tygo1RL_pJihi8y-cyNcOBref8M.roa
Signing time: Sun 03 Apr 2022 18:25:37 +0000
ROA not before: Sun 03 Apr 2022 18:25:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210542
IP address blocks: 195.80.49.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306047787 (0x123deb2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Apr 3 18:25:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b72828d512ffa498a18bccbe73235c381ade7fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c2:ea:15:60:0e:d1:e9:d7:e1:18:1b:92:17:
1a:b4:db:79:bd:70:86:e1:77:38:77:4b:62:b2:55:
4f:0f:02:2c:02:93:58:50:f3:bc:6a:92:d5:06:bc:
69:d4:30:6a:4f:ec:59:1a:c7:4b:18:30:6d:a8:dc:
5f:ba:c1:bd:82:57:de:1f:5a:56:21:7d:9e:dd:62:
3e:31:92:7e:2a:39:de:cb:ad:89:71:8b:5a:51:2d:
a2:86:a2:51:a6:7d:67:4f:d1:9f:f2:74:37:69:e5:
68:4c:08:63:39:04:da:8e:b0:f5:10:c2:b2:9f:de:
82:70:2d:78:92:78:68:f9:67:bb:39:a2:51:25:eb:
b1:91:74:99:13:30:17:43:00:05:f3:07:df:80:9b:
b2:47:91:4e:d7:68:cf:8c:29:e3:1a:93:fe:0b:ab:
bf:07:f3:38:95:18:89:ec:f3:6d:f4:f8:8f:23:1c:
bf:00:4c:1b:b2:4b:d2:7b:08:fa:47:e6:67:34:7a:
d8:5a:d3:e4:f7:98:a4:26:1c:c8:a6:be:12:5f:37:
91:e8:7d:22:70:eb:6d:aa:51:20:b1:32:49:59:48:
de:e1:cc:8d:76:be:7d:e2:e9:f4:8d:a0:ba:0a:cf:
d9:14:ab:66:0a:12:af:1d:ec:d3:d3:b6:df:02:93:
a7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:28:28:D5:12:FF:A4:98:A1:8B:CC:BE:73:23:5C:38:1A:DE:7F:C3
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/tygo1RL_pJihi8y-cyNcOBref8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.49.0/24
Signature Algorithm: sha256WithRSAEncryption
63:71:3e:22:91:98:98:15:b8:57:f4:37:08:d9:77:af:60:48:
8e:99:54:53:56:3a:58:1b:1c:69:4c:32:dd:7b:e3:71:54:5f:
e0:77:1a:1e:7b:4a:5f:38:a6:d8:a2:d7:1f:73:58:57:bc:60:
d7:22:16:65:ec:df:a2:d9:be:b0:ae:46:20:76:a6:1f:28:d1:
0d:6a:18:cc:65:8c:4e:ef:cf:cc:84:34:bf:5d:a9:9c:c3:e4:
0c:b2:0d:bb:78:53:29:e0:5a:3a:c8:04:d2:4e:31:80:49:3e:
48:55:58:ef:41:c4:ea:1b:af:fb:b2:b9:16:7c:b8:97:04:71:
d8:b7:c2:25:d4:dd:95:90:80:67:5d:4f:c7:91:45:80:48:3b:
93:77:18:f6:00:9c:12:20:24:6e:db:ba:4f:29:a5:b5:3a:fc:
e6:21:af:13:59:13:dc:30:35:71:fe:3b:86:85:e3:44:95:ab:
a5:1f:1f:d3:a6:9c:ae:28:03:eb:39:e4:d0:0d:63:2e:29:84:
56:f7:5d:04:98:1b:33:86:40:be:ae:c4:ee:93:b9:7e:d0:57:
5f:e3:32:a5:3f:7e:0d:ad:15:a6:b1:d6:51:16:66:a8:70:55:
18:56:46:e6:c9:41:17:a8:c5:f2:3d:37:88:79:36:56:33:87:
a3:77:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:15 2024 by rpki-client on console-ams.rpki-client.org